Last updated: 20 April 2018
You have the right to object to certain types of processing. For more information, please see the section “Your rights”.
Each of the companies listed are committed to protecting your privacy and are (depending on the reason for your interaction with us, as explained above) joint data controllers of your personal data within the meaning of data protection laws applicable in the European Union (“EU”) and European Economic Area (“EEA”).
As joint data controllers, we have arrangements between us to ensure that we handle your personal data correctly and in accordance with data protection laws applicable in the EU and EEA. These arrangements reflect our respective roles and responsibilities in relation to you, and considers which entity is in the best position to fulfil each obligation to you. This arrangement between us does not affect your legal rights.
If you ask that we stop using your personal data (see the section “Your rights”).
We retain your personal data for no longer than is necessary for the purposes for which the information is collected (see the section “Personal data we collect about you, how it is used and why, including the legal basis for our processing” for details of the relevant purposes). When determining the relevant retention periods, we will take into account factors including:
Otherwise, we securely erase your information once this is no longer needed for the purposes for which the information is collected.
We do not knowingly collect the personal data of children under 18 years of age, without the prior consent or authorisation of the holder of parental responsibility over the child.
By law, you have the following rights with regard to your personal data. Further information and advice about your rights can be obtained from your national data protection regulator. If you wish to exercise any of your rights in relation to your personal data, please contact us at Privacy.firstname.lastname@example.org.
1. Right to be informed
2. Right of access
3. Right to rectification
You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
4. Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing
You have rights to ‘block’ or suppress further use of your personal data. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.
6. Right to data portability
You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your personal data between our IT systems and theirs safely and securely, without affecting its usability.
7. Right to object to processing
You have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).
8. Right to withdraw consent
If you have given your consent for direct marketing, you have the right to withdraw your consent at any time. The withdrawal does not affect the lawfulness of previous processing, but from the time you withdraw your consent we will not process any further personal data. As noted above, if you withdraw consent then we may not be able to provide you with all the benefits of the Centre.
9. Right to lodge a complaint
You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
We are required by law to act on requests and provide information free of charge, except where your requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case we may charge a reasonable fee (taking into account the administrative costs of providing the information or communication or taking the action requested) or refuse to act on the request.
Please consider your request responsibly before submitting it. We will respond to your request as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will let you know.
To find out how to submit a request, please see the section “How you can contact us”.
Type of interaction with us: Luggage storage services
Types of personal data we collect: We collect the information you provide to us when you use the storage luggage services. This information includes your name, ID document, email address and mobile number.
Purpose of processing (how and why we use your personal data): We need your personal data in order to operate this service (luggage storage) in a professional, safe and secure manner.
Legal basis for processing: In order to store luggage, we need to collect and use the personal data referred to in the column to the left, until the services is duly completed and the guest has picked up their luggage, without any further complaints.
Controller(s) of your personal data: Centre Manco
Type of interaction with us: Entering an area of the Centre in which we operate security cameras
Types of personal data we collect: We operate security cameras at the Centre in limited areas where we have identified a need and where other solutions are ineffective to achieve the purposes described in the column to the right. This means that if you visit the Centre you may be captured on security camera.
There are prominent signs in the areas where the security cameras are operated.
Purpose of processing (how and why we use your personal data): Security cameras are used at the Centre for: monitoring the security of the Centre, safeguarding the safety of visitors and staff at the Centre and preventing and detecting crime.
Legal basis for processing: It is in our legitimate interests to collect and use the personal data referred to in the column to the left so that we can provide a safer, more secure environment for visitors and staff at the Centre, and to protect our property and that of VIA Outlets.
Please note that access to the security camera footage is restricted to authorised personnel of VIA Outlets and our security service provider that need to have access in order to achieve the purposes described in the column to the left. In addition, access to the footage will be granted to law enforcement agencies in certain circumstances in order to prevent and detect crime.
Controller(s) of your personal data: Centre Manco, Centre Propco
Type of interaction with us: Contacting us
Purpose of processing (how and why we use your personal data): We use your personal data so that we can respond to your communications.
Legal basis for processing: It is in our legitimate interests to collect and use the personal data referred to in the column to the left so that we can serve our customers’ needs.
Controller(s) of your personal data: If you contact us regarding any of the interaction types described above, the joint data controllers of any personal data you provide are the companies listed beside the relevant interaction type.